5 



assigning a reviewer and scheduling a time for said review; 



6 performing a readiness assessment prior to said time for said 

7 review; 

8 conducting said review by said reviewer including providing an 

9 overview and process flows identifying control points, providing 

10 deliverables, and providing a test plan; 

11 reporting results of said review; and 

12 determining whether said results justify a decision of 

13 certification of said software application. 

1 2. (original) The process of claim 1, wherein said review request 

2 is entered into a spreadsheet database. 

1 3. (original) The process of claim 1, wherein said readiness 

2 assessment is performed by answering questions in a checklist. 

1 4. (original) The process of claim 1, wherein said overview 

2 comprises an application environmental overview and an 

3 architectural overview. 

1 5. (original) The process of claim 1, wherein said process flows 

2 comprise flowcharts. 

1 6. (original) The process of claim 5, wherein said flowcharts 

2 identify the position of automated or manual control points 

3 within the software application. 
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1 7. (original) The process of claim 5, wherein said control points 

2 include text describing actions to be taken for normal and 

3 exception control outcome. 

1 8. (original) The process of claim 1, wherein said review 

2 includes a separation of duties evaluation. 

1 9. (original) The process of claim 1, wherein said review 

2 includes an evaluation of control points that prevent 

3 unauthorized change to said software application. 

1 10. (original) The process of claim 1, wherein said test plan 

2 describes test scenarios and expected results for all said 

3 control points . 

1 11. (original) The process of claim 1, wherein said review 
further comprises providing a demonstration. 

1 12. (original) A process for certifying a software application, 

2 comprising the steps of: 

3 entering a review request for a software application into a 

4 staging database; 

5 assigning a reviewer and scheduling a time for said review; 

6 performing a readiness assessment prior to said time for said 

7 review; 

8 conducting said review by said reviewer including providing an 

9 overview and process flows identifying control points, providing 
10 deliverables, and providing a test plan; 
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reporting results of said review; 



12 determining whether said results justify a decision of 

13 certification of said software application, and if so; 

14 deploying said software application; and 

15 executing at least a part of said test plan. 

1 13. (original) The process of claim 12, wherein said review 
further comprises providing a demonstration. 

1 14. (currently amended) A computer program product for 

2 instructing a processor to certify a software application, said 

3 computer program product comprising: 

4 a computer readable medium; 

5 first program instruction means for entering a review request for 

6 a software application into a staging database; 

7 second program instruction means for assigning a reviewer and 

8 scheduling a time for said review; 

9 third program instruction means for performing a readiness 

10 assessment prior to said time for said review; 

11 fourth program instruction means for assisting said reviewer in 

12 conducting said review including assisting in providing an 

13 overview and process flows identifying control points, assisting 

14 in providing deliverables, and assisting in providing a test 

15 plan; 
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